User Guide Customer Registration Service (CRS) Access Coordinator (AC) September 2013 The Depository Trust & Clearing Corporation Distributed Systems Development
The primary purpose of this product guide is to familiarize members with the DTCC Customer Registration System (CRS). This guide is not intended to serve as a legal document. No statement in this guide should be construed as a legally binding rule or regulation, or as creating an obligation on the part of DTCC or any person. In addition, any time schedules or time requirements set forth herein are subject to change without notice. Participants should refer to the DTCC Rules & s for the legal obligations of any party utilizing the DTCC Customer Registration System. The Rules & s of DTCC, plus all updates and revisions, should be obtained by all participants from your DTCC Relationship Manager. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page i
Table of Contents What s New... 1... 1 Introduction... 2 Purpose... 2 Audience... 2 Screenshots... 2 Structure... 2 Super ACs, ACs, And Operators... 3 User Levels... 3 User Profiles And Login IDs... 4 User Profiles... 4 Login IDs... 4 Web Login IDs... 4 Mainframe Login IDs... 4 Global Login IDs... 4 Logging Into CRS... 5... 5... 5 Home Page... 8... 8... 8 Help... 9... 9 Dashboard... 11... 11... 11 Creating User Profiles... 12... 12... 12 Searching For User Profiles... 17... 17... 17 Adding/Modifying Products... 21 CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page ii
... 21... 21 Emulating Login IDs... 27... 27... 27 Completing Registration... 29... 29 Updating User Profiles... 30... 30... 30 Deleting User Profiles... 31... 31... 31 Adding Login IDs To Existing User Profiles... 32... 32... 32 Disabling Login IDs... 33... 33... 33 Enabling Login IDs... 35... 35... 35 Deleting Login IDs... 37... 37... 37 Resetting Passwords... 38... 38... 38 Reissuing Digital Certificates... 40... 40 B2B Products... 40 Dashboard... 40... 40 Registering Computers... 42 CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page iii
... 42... 42 Managing Your Worklist... 44... 44 Approving/Rejecting Requests... 44 Killing/Resubmitting Requests... 45 Claiming Existing Mainframe IDs... 47... 47... 47 Searching For Transactions... 49... 49... 49 Request Types... 50 Request Status... 51 Resubmitting And Rejecting Transactions... 53 Resubmitting Transactions... 53... 53... 53 Rejecting Transactions... 53... 53... 54 Generating Email Domain Reports... 55... 55... 55 Managing Email Domains... 56... 56... 56 Reverifying Users... 57... 57... 57 Managing Reverification... 59... 59... 59 Appendix: Emails... 61... 61 CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page iv
New Web Login ID Emails... 61 New Global Login ID Emails... 63 Claim Existing Mainframe Login ID Email... 64 Existing User Registration Completion Emails... 65 Web Products Email... 65 Global Products Email... 65 Mainframe Products Email... 66 Reverification Email... 67 Reverification Reminder Email... 67 Reverification Period Email... 68 Reset Password Email... 69 Reissued Activation Code Email... 70 Web Login IDs... 70 Global Login IDs... 71 Mainframe Login IDs... 71 Digital Certificate Email... 72 Digital Certificate About To Expire Email... 72 Reissued Digital Certificate Email... 73 User Update Emails... 74 Updated Hint Questions Email... 74 Updated User Profile Email... 74 Claiming Existing Mainframe IDs Email... 75 Claim Request Approved Email... 75 Claim Request Rejected Email... 75 Worklist Emails... 76 Pending Email... 76 CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page v
What s New What s New If you ve used CRS before, you will notice several major changes in this release. These changes were made to improve usability and increase functionality: The Dashboard has been moved to a separate page. See Dashboard for further details. Creating user profiles has been completely redesigned. The separate User menu has been merged into the Home menu. See Creating User Profiles for further details. Search functionality has been unified under the Home menu. The separate Auditing and Reporting menu has been eliminated. See Searching For User Profiles for further details. Each user can have one and only one user profile. Each user profile can have an unlimited number of web, mainframe, and global login IDs. See User Profiles And Login IDs for further details. 0 (Participant) mainframe login IDs has been added. Global login IDs have been added. Resetting passwords has been separated by login ID type (mainframe, web, global). See Resetting Passwords for further details. Disabling, enabling, and deleting login IDs have been broken into separate functions. See Disabling Login IDs, Enabling Login IDs, and Deleting Login IDs for further details. Claim ID Requests has been moved to the Worklist menu. See Claiming Existing Mainframe IDs for further details. Login IDs and temporary passwords/activation codes/certificate retrieval codes are automatically emailed to users. You no longer must communicate this information to users yourself. See New Web Login ID Emails, New Global Login ID Emails, Reset Password Email, Reissued Activation Code Email, and Reissued Digital Certificate Email for further details. Previously, if you removed all products from a login ID, the login ID was automatically deleted. This is no longer true. A login ID can exist without any products, although the user won t be able to use it to access anything. See Adding/Modifying Products for further details. Dashboard statistics are now updated in real time. See Dashboard for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 1
Introduction Purpose Introduction Purpose The purpose of this document is to describe how to use the Customer Registration System (CRS). CRS will enable you to register and manage users for DTCC products. This includes: Creating, modifying, and deleting user profiles Creating, modifying, deleting, enabling, and disabling login IDs Adding and removing products, roles, and accounts Resetting passwords Reissuing digital certificates Registering computers Reverifying users Managing your company s email domains Claiming existing mainframe login IDs Audience The intended audience for this document is external Access Coordinators (ACs) and Super Access Coordinators (Super ACs). See the section on Super ACs, ACs, And Operators for further details. Screenshots The screens you see may vary, depending on your level of access. Wherever possible, we will indicate the differences. Structure This document is organized following the menu structure of CRS. Again, the menus and functions you see may vary depending on your level of access. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 2
Super ACs, ACs, And Operators User Levels Super ACs, ACs, And Operators User Levels CRS has three levels of users: Super Access Coordinators (Super ACs), Access Coordinators (ACs), and Operators. Operators are end users of DTCC s products. ACs are responsible for managing Operators. Super ACs are responsible for managing Operators, ACs, and other Super ACs. Table 1 summarizes this information: Table 1: Super ACs, ACs, And Operators Manages Operators ACs Super ACs Super ACs ACs Operators A user can be both an AC and an Operator, or a Super AC and an Operator, for his/her company; however, a user cannot be both a Super AC and an AC for his/her company. An AC can be given Inquiry Only access to CRS. Inquiry Only users can only display, not update, information in CRS. Creating, modifying, deleting, enabling, or disabling a Super AC requires approval by another Super AC at your company. If you submit one of these requests, the following warning will be displayed: This request requires approval by another Super AC at your company. See Managing Your Worklist for further details. If your company ever has less than two Super ACs, then you must contact DTCC to have additional Super ACs created. For further information, please go to: http://www.dtcc.com/customer/participant/access_forms/index.php CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 3
User Profiles And Login IDs User Profiles User Profiles And Login IDs Before you can start registering and managing users using CRS, you must understand the relationship between user profiles and login IDs. User Profiles Each user should have one profile. The profile contains basic information about that user: Email address Company Name First name Last name Phone number (including, optionally, country code and extension) Note: User profiles are unique by email address and company name. If a user has more than one email address, then he/she can have more than one profile. Login IDs Each user profile must have at least one login ID. There are three types of login IDs: mainframe login IDs, web login IDs, and global login IDs. Web Login IDs Web login IDs are used with web products, e.g., ACATS. Web login IDs may be up to 64 characters long. Typically, a web login ID is the same as the user s email address, but it doesn t have to be. Mainframe Login IDs Mainframe login IDs are used with mainframe products, e.g., Settlement Web. Mainframe login IDs are in the format 0aaaa0uu, where 0 indicates Participant, aaaa indicates the account, 0 indicates PBS/PTS, and uu indicates the individual user. Global Login IDs Global login IDs are used with global products, e.g., Global Trade Repository. Like web login IDs, global login IDs may be up to 64 characters long. Typically, a global login ID is the same as the user s email address, but it doesn t have to be. Unlike web login IDs, global login IDs can only be Operators. Global login IDs can not be ACs or SACs. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 4
Logging Into CRS Logging Into CRS CRS is like any other product managed by CRS: you must complete the registration request for CRS before accessing CRS. See Completing Registration for further details. Once you have completed the request for CRS, you can login to CRS. 1 Go to the appropriate URL. You will be prompted to enter your login ID and password: Note: Your login screen may look slightly different, depending on which URL you use. Note: If you forget your password and you are registered for Self-Service Password Management, then click Forgot your password? Go to the following URL for more on Self-Service Password Management: http://www.dtcc.com/customer/participant/password/index.php If you forget your password but you are not registered for Self-Service Password Management, then you must call Customer Support to reset your password for you: U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 5
Logging Into CRS International Callers: 212-855-8099 (Select option 5 then 2) 2 Enter your login ID and password and click Login. The Portal will be displayed. The Portal lists all products you have access to, including CRS: Note: Your Portal may look slightly different, depending on which URL you use. 3 Select CRS - Customer Registration System from the Portal. 4 If you have not acknowledged your responsibilities, then you will be prompted to acknowledge your responsibilities: Click Agree to acknowledge your responsibilities. Note: If you don t acknowledge your responsibilities, then you will not be allowed to access CRS; you will be logged off. The next time you try to access CRS, you will be prompted to acknowledge your responsibilities again. You must re-acknowledge your responsibilities twice a year: after January 1st and after July 1st. 5 If you have acknowledged your responsibilities, then the Home page will be displayed. See Home Page for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 6
Logging Into CRS 6 The first time you login, the Documentation window will be displayed: Clicking links on this window displays useful documentation (including this guide). You can redisplay this window any time by click on Help. See Help for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 7
Home Page Home Page When you first login to CRS, the Home page will be displayed. This is where you do most of your work. You can return to this page anytime by clicking Home. Note: Clicking Home also refreshes your search results. See Searching For User Profiles for further details. 1 Login to CRS or click Home. The Home page will be displayed: Note: The search results section says No profiles match the specified search criteria because you haven t run any searches yet. Note: Your login ID is displayed in the upper right-hand corner. Next to your login ID in parenthesis are three digits, e.g., (111). These are for diagnostic purposes only. If you ever have a problem with CRS, you may be asked for these numbers. 2 If you want to search for existing profiles, click Search Profiles. See Searching For User Profiles for further details. 3 If you want to create a new profile, click Create Profile. See Creating User Profiles for further details. 4 If you want to display links to documentation, click Help. See Help for further details. If you want to display statistics about your company, click Dashboard. See Dashboard for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 8
Help Help Clicking Help opens the documentation window: This is the same window that was displayed the first time you logged into CRS. See Logging Into CRS for further details. This window contains links to the following documents: Create a New Operator takes you to a quick guide for registering an end user of DTCC s products. Make Yourself an Operator takes you to a quick guide for registering yourself as an end user of DTCC s products. User Guide takes you to this document. Access Coordinator Forms takes you to forms for applying to become an AC or Super AC. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 9
Help Registration Completion Instructions takes you to a document prepared for operators describing how to complete the registration process. Clicking OK closes this window. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 10
Dashboard Dashboard The Dashboard displays statistics about your company. Statistics are for login IDs. For example, Active Users is the number of enabled login IDs, not the number of enabled user profiles. Clicking on a statistic displays the search results for that statistic. For example, clicking on the number of active user displays a list of all active users. These search results are returned in real-time, not a snapshot from the night before, so they may differ from the statistics. See Searching For User Profiles for further details. 1 If the Home page isn t already displayed, click Home. See Home Page for further details. 2 Click Dashboard. The Dashboard will be displayed: Note: Active users are all enabled login IDs within your company. See Enabling Login IDs for further details. Note: Disabled users are all disabled login IDs within your company. See Disabling Login IDs for further details. Note: Active Certificates are the number of login IDs with digital certificates that will not expire in 60 days or less. You can reissue digital certificates to login IDs whose certificates have been lost, corrupted, or expired. See Reissuing Digital Certificates for further details. 3 Click on any statistic to display the search results for that statistic. See Searching For User Profiles for further details. Note: The search results include in-flight requests; the Dashboard doesn t. This means the search results may show more matches than the Dashboard. 4 Click the X in the upper right-hand corner to close the Dashboard. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 11
Creating User Profiles Creating User Profiles Each user must have a profile. The profile contains basic information about that user: company, first name, last name, email address, phone number, and (optionally) extension. Profiles are unique by company and email address. That is, you cannot create more than one profile for the same company and email address. Each profile must have at least one login ID. The login ID lets the user login and use the products he or she is registered for. The login ID can be a web, mainframe, or global login ID. 1 If the Home page isn t already displayed, click Home. See Home Page for further details. 2 Click Create Profile. You will be prompted to enter user profile information: Note: All fields are mandatory except Extension. Company defaults to the name of your company and cannot be changed. Note: If a profile already exists for the email address you entered, the following warning message will be displayed: A matching profile already exists in CRS. You will not be allowed to create another profile with the same email address. Either change the email address or click Cancel and search for the existing user profile. See Searching For User Profiles for further details. 3 If the email domain (the characters to the right of the @) you entered doesn t match any of your company s email domains, then you will be prompted to add the email domain to your company s email domains: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 12
Creating User Profiles Note: In this example, the email domain is yyy.com. Click Yes and enter a comment to add the email domain to your company s email domains, or No. See Managing Email Domains for further details. 4 Fill in the user profile information and click Next. You will be prompted to select either a global, mainframe, or web login ID: Note: If you are uncertain which type of login ID to select, click the List Products buttons. The products for that that type of login ID will be displayed. If necessary, you can always add another login ID to the profile. See Adding Login IDs To Existing User Profiles for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 13
Creating User Profiles 5 If you want to create a new web login ID, click the radio button to the left of Web. You will be prompted to enter a web login ID: Note: If this is the first web or global login ID you are creating for a user profile, then it will default to the same as the user s email address; you can keep it or change it. If this is not the first web or global login ID you are creating for a user profile, then the field will be blank and you must fill it in; the web login ID you enter must be unique. 6 If you want to create a new global login ID, click the radio button to the left of Global. You will be prompted to enter a global login ID: Note: If this is the first web or global login ID you are creating for a user profile, then it will default to the same as the user s email address; you can keep it or change it. If this is not the first web or global login ID you are creating for a user profile, then the field will be blank and you must fill it in; the web or global login ID you enter must be unique. 7 If you want to claim an existing mainframe login ID, click the radio button to the left of Mainframe, select Claim Existing ID, then select one of the accounts listed, then enter CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 14
Creating User Profiles the last two characters of the ID: Note: If there are no accounts listed, then this indicates that your company has not been configured properly. Please contact Customer Support for assistance. Note: CRS will validate that the mainframe login ID you entered exists and has not already been claimed. An existing mainframe login ID can only be claimed by one user profile. Note: Users can also submit requests to claim existing mainframe login IDs. You can approve or reject these requests. See Claiming Existing Mainframe IDs for further details. 8 When you are finished, click Create. A summary of the user profile and login ID you created or claimed will be displayed: Note: If you created a new web login ID, CRS emails the new login ID and temporary password to the user in two separate emails, along with instructions on how to complete registration. See New Web Login ID Emails for further details. Note: If you created a new global login ID, CRS emails the new login ID and temporary password to the user in two separate emails, along with instructions on how to complete registration. See New Global Login ID Emails for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 15
Creating User Profiles Note: If you claimed an existing mainframe login ID, CRS emails the existing login ID to the user, along with instructions on how to complete the claim process. See Claiming Existing Mainframe IDs for further details. 9 If you want to add products to the login ID you have just created, click S for Super AC, A for AC, or O for Operator. Note that S and A are not supported for global login IDs and are crossed out. See Adding/Modifying Products for further details. 10 If you don t want to add products to the login ID you have just created at this time, click Close. You can always come back and add products at a later time. See Adding/Modifying Products for further details. The user profile and login ID you have just created will appear in the search summary: Note: The status of the request will be Pending User Completion (PUC). See Request Status for further details. Note: If the status of the request is SY1, click Home to refresh the search results. This is an interim status that should not persist. If the SY1 status persists, contact Customer Support. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 16
Searching For User Profiles Searching For User Profiles You can search for existing user profiles several different ways: By user profile information: first name, last name, email address, and/or login ID. By AC type and, optionally, product By Operator and, optionally, product, role, and/or account. Searches are not case sensitive. For example, they don t distinguish between John, john, and JOHN. Search supports wildcards. For example, entering j* in the First Name field searches for all users whose first name begins with the letter j. Entering *j in the First Name field searches for all users whose first name ends with the letter j. Entering *j* in the First Name field searches for all users whose first name contains the letter j. The more criteria you enter, the more precise your results will be. For example, if you enter first name John and last name Doe, this will return more precise results than if you just enter first name John. If your search criteria are too broad, you will get the following warning message: 1 If the Home page isn t already displayed, click Home. See Home Page for further details. 2 Click Search Profiles. You are prompted for the type of search you want to perform: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 17
Searching For User Profiles Note: By default, searches include: Mainframe, web, and global login IDs. Super ACs, ACs, Operators, and IDs without any products. In-flight results, i.e., uncompleted requests. You can limit your search results and accelerate your searches by clearing any of these check boxes. 3 If you want to search by user profile information, click Search by User Info (the default). You are prompted to enter user profile information: Note: Searching by email address returns all login IDs for that email address. Searching by login ID only returns that specific login ID. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 18
Searching For User Profiles 4 If you want to search for ACs, click Search by AC Type. You are prompted to select an AC type and, optionally, a specific product: 5 If you want to search for Operators, click Search by Operator Product. You will be prompted to, optionally, select a specific product, role, and/or account: Note: An account in this context can be an actual account, an O-code associated with an account, or a Deriv/SERV O-code; CRS doesn t differentiate. See the individual product documentation for descriptions of accounts, O-codes, and Deriv/SERV O-codes. 6 Once you have entered your desired search criteria, click Search. CRS will search for user profiles that match your criteria, then display the results: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 19
Searching For User Profiles Note: Profiles are listed alphabetically, by email address. For each profile, the following information is displayed: email address, first name, last name, phone number, and (optionally) extension. Note: Under each profile, login IDs are listed alphabetically, by login ID. For each login ID, the following information is displayed: login ID type ( for mainframe, for web, for global), user type (S for Super AC, A for AC, O for Operator), login ID, last login date (for web and mainframe IDs only), and current request status. See Request Status for further details. Note: If a login ID is disabled, then the login ID type is displayed with a red circle around it and a red slash through it. See Disabling Login IDs for further details. If a login ID is enabled, then the login ID type is displayed normally. See Enabling Login IDs for further details. Note: User profiles and login IDs that have completed being created are displayed in black. User profiles and login IDs that are in the process of being created are displayed in light and dark green. User profiles and login IDs that are in the process of being deleted are displayed in light and dark red and struck through. If you forget, click on Legend: Note: If you don t enter any search criteria, then CRS will return all user profiles for your company. Depending on the size of your company, this may be a large number of user profiles, and may take a long time to process. Consider entering some search criteria to reduce and accelerate your results. Note: You can export your search results to a spreadsheet by clicking the Export Overview and Export Details buttons. Export Overview exports all of the user profile information. Export Detail exports all of the user profile information and all of the login ID information. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 20
Adding/Modifying Products Adding/Modifying Products Operators use products. ACs and Super ACs manage products, i.e., register users for products. Adding a product to a login ID gives that login ID access to that product. Removing a product from a login ID takes away access to that product. Depending on the product, it may have roles and/or accounts. See the specific product documentation for further details. Adding a role or account to a product gives the login ID access to that role or account for that product. Removing a role or account from a product takes away access to that role or account for that product. For Operators, you must manually add the roles and accounts for a product. For ACs and Super ACs, CRS automatically adds all roles for a product; depending on how the product is configured, CRS may also automatically add all accounts. CRS also automatically adds the CRS product to all ACs and Super ACs. Products, roles, and accounts that have completed being added are displayed in black. Products, roles, and accounts that are in the process of being added are displayed in light and dark green. Products, roles, and accounts that are in the process of being removed are displayed in light and dark red and struck through. If you forget, click on Legend: You can copy products, roles, and accounts from one login ID to another login ID. See Emulating Login IDs for further details. 1 If the login ID you want to add/modify products for isn t already displayed, search for it. See Searching For User Profiles for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 21
Adding/Modifying Products 2 Click S for Super AC, A for AC, or O for Operator. The products that are currently added to that user type will be displayed: In this example, no products are currently added for this login ID (jdoe@yahoo.com) and user type (Operator). Note: Super Access Coordinators can create Super Access Coordinators, Access Coordinators, and Operators. Access Coordinators can only create Operators. The S and A options are crossed out for Access Coordinators. Note: Global login IDs can only be Operators. Global login IDs can not be Super ACs or ACs. The S and A options are crossed out for global login IDs, even if you are a Super AC. 3 Click Add/Modify Products. The products you can add to this login ID will be displayed: Note: Products are grouped together by lines of business. The products you see depend on the login ID type (global, web, or mainframe) and the products you have been registered as Access Coordinator or Super Access Coordinator to manage. 4 Check the boxes of the products you want to add to the login ID and user type. For each product you check, the roles and/or accounts associated with that product will be CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 22
Adding/Modifying Products displayed: In this example, the product ACATS has roles and accounts associated with it. 5 If the product has roles, click on the dropdown arrow next to the roles. The roles associated with the product will be displayed: In this example, there are two roles associated with the ACATS product: ACATS ENTER and ACATS SUBMIT. 6 If the product has roles, click the check box for every role you want to register the user for. You can select/deselect all of the roles using the checkboxes on the upper left corner. Then click Submit to save your selections or Cancel to cancel them. The roles you have selected to register the user for will be displayed: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 23
Adding/Modifying Products In this example, we have selected both roles. Note: If a product has only one role, then that role is automatically selected. If the user type is AC or Super AC, then all roles are automatically selected. 7 If the product has accounts, click the dropdown arrow next to Accounts. The accounts associated with the product will be displayed: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 24
Adding/Modifying Products In this example, there are several accounts associated with ACATS. 8 If the product has accounts, click the check box for every account you want to register the user for. You can select/deselect all of the accounts using the checkboxes on the upper left corner. Then click Submit to save your selections or Cancel to cancel them. The accounts you have selected to register the user for will be displayed: In this example, we have selected the first three accounts. Note: If a product has only one account, then that account is automatically selected. 9 Click Confirm. CRS validates the products, roles, and accounts you have added or removed, and displays the results: If there is an error message, click Back, correct your selections, then click Confirm again. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 25
Adding/Modifying Products 10 If there are no errors, click Submit. Note: CRS will generate one transaction-request per product. For example, if you register the user for three products, CRS will generate three transaction-requests. See Searching For Transactions for further details. Note: CRS will automatically email the user a notice that a product has been added. One email is sent per product. See Existing User Registration Completion Emails for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 26
Emulating Login IDs Emulating Login IDs Emulating a login ID lets you copy the products, roles, and accounts from one login ID to another login ID. This can be convenient if you are creating multiple login IDs with similar products, roles, and accounts. The source login ID must be of the same type as the target login ID: global, web, or mainframe. Copying is done at the user type level: Super AC, AC, or Operator. You must review and confirm the target login ID s products, roles, and accounts before submitting them. Any products, roles, and accounts the target login ID had for that user level before emulation will be overwritten. The source login ID must be in the Completed (COM) state. You cannot emulate in-flight login IDs. 1 If the login ID you want to add/modify products for isn t already displayed, search for it. See Searching For User Profiles for further details. 2 Click S for Super AC, A for AC, or O for Operator. The products that are currently registered for that user type will be displayed: In this example, no products are currently registered for this login ID (jdoe@yahoo.com) and user type (Operator). CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 27
Emulating Login IDs 3 Click Add/Modify Products. The products you can register this login ID for will be displayed: 4 Enter the source login ID in the field on the lower left-hand corner of the page, and click Emulate. The source login ID s products, roles, and accounts will be copied to the target login ID for that user type: 5 If necessary, add or remove any products, roles, and accounts. 6 Click Confirm, then Submit, just as if you had added the products, roles, and accounts manually. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 28
Completing Registration Completing Registration Once a user s registration request has been approved, the user must complete registration for that login ID. The user will be emailed two separate emails, one containing the user s login ID and the other containing the user s temporary password and instructions on completing registration. The steps for completing registration vary, depending on the login ID type (global, mainframe, web) and product. See the Registration Completion Instructions for further details. You can access these instructions by clicking on the link on Help. See Help for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 29
Updating User Profiles Updating User Profiles You can update a user s profile information first name, last name, phone number, email address--at any time. 1 Display the user profile you wish to update. See Searching For User Profiles for further details. 2 Click on the dropdown arrow to the left of the user profile. The user profile menu will be displayed: 3 Click Update Profile. You will be prompted to update the user s profile: 4 Edit the user s profile information as necessary, then click Update. The updated profile will be displayed: 5 Click Close. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 30
Deleting User Profiles Deleting User Profiles Periodically, you may need to delete a user profile. For example, an employee may leave your company. Deleting a user profile deletes all login IDs assigned to it. If you want to delete an individual login ID, use the Delete Login ID command instead. See Deleting Login IDs for further details. Note: Once you delete a user profile or login ID, you cannot undelete it. If you are unsure, try disabling the login ID(s) instead. See Disabling Login IDs for further details. 1 Display the user profile you wish to delete. See Searching For User Profiles for further details. 2 Click on the dropdown arrow to the left of the user profile. The user profile menu will be displayed: 3 Click Delete Profile. You will be prompted to confirm: 4 Click Delete to delete the user profile or Cancel to cancel. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 31
Adding Login IDs To Existing User Profiles Adding Login IDs To Existing User Profiles A user profile can have multiple login IDs. For example, you may wish to create a user profile with a web login ID for web products, then later add a mainframe login ID for mainframe products and a global login ID for global products. You can add more login IDs to an existing user profile at any time. There is no maximum number of login IDs that can be added to a user profile. 1 Display the user profile you wish to add a login ID to. See Searching For User Profiles for further details. 2 Click on the dropdown arrow to the left of the profile. The user profile menu will be displayed: 3 Click Add Login ID. You will be prompted to select either a web or mainframe login ID to add: 4 The remainder of the procedure is exactly the same as adding a login ID to a new user profile. See Creating User Profiles for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 32
Disabling Login IDs Disabling Login IDs Disabling a login ID temporarily prevents it from accessing any of its products, without removing the products. Disabling a login ID may be preferable to removing all of its products or permanently deleting the login ID. See Deleting Login IDs for further details. Enabling a login ID undoes disabling a login ID. See Enabling Login IDs for further details. A login ID that has been disabled by an AC or Super AC at your company can only be reenabled by an AC or Super AC at your company. The login ID cannot be re-enabled by DTCC Customer Support. You can display a list of all disabled login IDs from the Dashboard. See Dashboard for further details. 1 Display the login ID you wish to disable. See Searching For User Profiles for further details. 2 Click the dropdown arrow to the right of the login ID. The login ID menu will be displayed: Note: If the login ID is already disabled, then the Disable Login ID command will not be listed on the menu. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 33
Disabling Login IDs 3 Click Disable Login ID. You will be prompted to enter a reason for disabling the login ID: 4 Enter a reason and click Disable. The login ID will be disabled: 5 Click Close. The next time you display the login ID, the login ID type will be displayed with a red circle around it and a diagonal slash through it, indicating it is disabled: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 34
Enabling Login IDs Enabling Login IDs Enabling a login ID undoes disabling it. See Disabling Login IDs for further details. Once you enable a login ID, the login ID can access its products again. You can display a list of all active (enabled) login IDs from the Dashboard. See Dashboard for further details. 1 Display the login ID you wish to enable. See Searching For User Profiles for further details. Disable login IDs will be displayed with the login ID type surrounded by a red circle with a diagonal slash through it, indicating the login ID is disabled: 2 Click the dropdown arrow to the right of the login ID you wish to enable. The login ID menu will be displayed: Note: If the login ID is already enabled, then the Enable Login ID command will not be listed on the menu. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 35
Enabling Login IDs 3 Click Enable Login ID. You will be prompted to confirm you wish to enable this login ID: 4 Click Enable to enable the login ID. The login ID will be enabled: 5 Click Close. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 36
Deleting Login IDs Deleting Login IDs Periodically, you may need to delete a login ID. For example, an employee may be reassigned and no longer need a specific login ID. Once you delete a login ID, you cannot undelete it. If you are unsure, try disabling it instead. See Disabling Login IDs for further details. Note: If you delete the only login ID added to a user profile, then the user profile will also be deleted. A user profile must have at least one login ID. 1 Display the login ID you wish to delete. See Searching For User Profiles for further details. 2 Click the dropdown arrow to the right of the login ID. The login ID menu will be displayed: 3 Click Delete Login ID. You will be prompted to enter a comment: 4 Enter a comment and click Delete to delete the login ID, or Cancel to cancel. You will be informed the delete was successful: 5 Click Close. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 37
Resetting Passwords Resetting Passwords If a user forgets his/her password, the user may ask you to reset his/her password. Resetting a user s password issues a new, temporary password for a login ID. Note: A login ID will become locked (not allowed to login) if a user enters three incorrect passwords in a row. Resetting the login ID s password also unlocks the login ID. 1 Display the login ID you wish to reset the password for. See Searching For User Profiles for further details. 2 Click the dropdown arrow to the right of the login ID. The login ID menu will be displayed: 3 Click Reset Password. You will be prompted to reset the login ID s password: 4 Click Reset. A new temporary password will be generated for the login ID: Note: CRS will automatically email this temporary password to the user. See Reset Password Email for further details. The next time the user logs in with this login ID and temporary password, he/she will be forced to change his/her password. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 38
Resetting Passwords Note: For security reasons, this is the only time the temporary password is displayed to you. The temporary password is not stored in the transaction history. See Searching For Transactions for further details. Once you click OK, only the recipient of the email can see the temporary password. 5 Click OK. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 39
Reissuing Digital Certificates Reissuing Digital Certificates B2B Products Business-to-business (B2B) products require digital certificates. When a user completes a request the first time for a B2B product for a login ID, he/she downloads and installs a digital certificate. See Completing Registration for further details Dashboard Digital certificates expire and must be reissued annually. The Dashboard lists the number of users within your company that have unexpired digital certificates, digital certificates that will expire in the next 60 days, and digital certificates that have expired. See Dashboard for further details. In addition, digital certificates can be lost, damaged, or corrupted. 1 Display the login ID you wish to reissue the certificate for. See Searching For User Profiles for further details. 2 Click the dropdown arrow to the right of the login ID. The login ID menu will be displayed: Note: The Reissue Certificate command will be displayed only if the login ID is registered for a B2B product. In this example, the login ID is registered for the B2B product AIX-B2B Interface. Note: If the login ID has a certificate, then the name and expiration date of that certificate will be displayed when you click O for Operator. 3 Click Reissue Certificate. You will be prompted: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 40
Reissuing Digital Certificates 4 Select a reason from the Comments dropdown menu: 5 Click Reissue. CRS will generate a new digital certificate: Note: The new digital certificate, along with instructions on how to download and install it, will be emailed to the user. See Reissued Digital Certificate Email for further details. Note: For security reasons, this is the only time the retrieval code is displayed to you. The retrieval code is not stored in the transaction history. See Searching For Transactions for further details. Once you click OK, only the recipient of the email can see the retrieval code. 6 Click OK. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 41
Registering Computers Registering Computers The first time a new web or global login ID completes registration, its computer is registered. To complete registration, the user requires an activation code. Normally, a user is issued an activation code automatically, and AC intervention is not required. See Completing Registration for further details. This function covers a user who encountered problems registering his/her computer and requires help. The most common problems are: The user never received his/her activation code. The user s activation code expired before he/she had a chance to enter it. The user entered his/her activation code incorrectly three times in a row. The user s browser doesn t have cookies enabled. Note: Only web and global login IDs require activation codes. Mainframe login IDs do not require activation codes. 1 Display the login ID you wish to register the computer for. See Searching For User Profiles for further details. 2 Click the dropdown arrow to the right of the login ID. The login ID menu will be displayed: 3 Click Register Computer. You will be prompted to register the computer: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 42
Registering Computers 4 Click Register. A new activation code will be generated for the user: Note: CRS will automatically email the new activation code to the user. See Reissued Activation Code Email for further details. Note: For security reasons, this is the only time the activation code is displayed to you. The activation code is not stored in the transaction history. See Searching For Transactions for further details. Once you click OK, only the recipient of the email can see the activation code. 5 Click OK. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 43
Managing Your Worklist Managing Your Worklist If a request is submitted to create, modify, delete, enable, or disable a Super AC, then another Super AC must approve the request. The request will be routed to your worklist. The Super AC who approves the request must be different from the Super AC who submitted the request. Approving/Rejecting Requests 1 Choose My Worklist from the Worklist menu: 2 A list of items will be displayed: Items with a green arrow to the left of them can be checked out and require your attention. Items with a red arrow to the left of them have been checked out and must be checked in to complete processing. Items with a white page to the left of them are read only. If you are a Super AC, and have submitted a request to create, modify, delete, enable, or disable another Super AC, then the request will appear to you as read only. A different Super AC must check out the request to approve it. Items with a red exclamation mark (! ) to the right of them have been on the list for more than 48 hours. The dropdown menu defaults to All My Queues. There are two other options: Delegated Queue: an AC or Super AC enters a registration request on behalf of a user. All of your requests should be delegated requests. Self Reg Queue: a user enters a registration request on behalf of him/herself, then the request is routed to an AC or Super AC for approval. Only internal ACs and Super ACs have access to self-registration requests. None of your requests should be self-registration requests. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 44
Managing Your Worklist Killing/Resubmitting Requests 3 Click the green arrow next to an item to check it out. The item will be displayed: 4 If you want to approve the item, click Submit. You will be prompted: Click OK. The item will be approved and you will be returned to your worklist. The item will no longer appear on your worklist. 5 If you want to reject the item, click Reject. You will be prompted to enter a reason for your rejection: Enter a reason and click Submit. The item will be rejected and you will be returned to your worklist. The item will no longer appear on your worklist. The item will appear instead on the originator s worklist in the INC (incomplete) state. The originator can then either reject the item, which deletes it, or update it and resubmit it for approval. 6 If you don t want to approve or reject the item, click Retain. The item will be returned to your worklist unchanged. Killing/Resubmitting Requests If a request you entered is rejected by another AC or Super AC, it will be returned to your worklist with a status of INC (incomplete). When you open the request, you will have four CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 45
Managing Your Worklist Killing/Resubmitting Requests options: 1 If you want to kill the request, click Reject. The request will be deleted from your worklist. No further action can be taken on this request. 2 If you want to mark the request as awaiting further information, click Pending. The request will be returned to your worklist with a status of PEN (pending). You can check it out again when you are ready to work on it. An email will be sent to the user including your comments. See Pending Email for further details. 3 If you want to keep the request on your worklist but not change the status, click Retain. The request will be returned to your worklist with the same status of INC. An email will not be sent to the user. You can check it out again when you are ready to work on it. 4 If you want to resubmit the request for approval, optionally update the fields and click Update. The status of the request will be changed to ACC (accepted). Another AC or Super AC must check out the request to approve it. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 46
Claiming Existing Mainframe IDs Claiming Existing Mainframe IDs There are mainframe IDs outside of CRS. Users may submit claims for these IDs to CRS. These claims are routed to the appropriate Super ACs to approve or reject. If you approve a claim, then the ID becomes known to CRS, and you may assign products to it. If you reject a claim, then the ID remains unknown to CRS, and you cannot assign products to it. Note: Once you approve a claim, that user owns that ID. No other user can claim it. Note: If you know an existing mainframe login ID you can claim it on behalf of a user. See Creating User Profiles for further details. 1 Choose Claim ID Requests from the Worklist menu: 2 If there are no current claim requests, then the no user to be claimed at this time message will be displayed. 3 If there are one or more claim requests, then they will be listed: 4 If you want to approve a claim request, check the Approve box and click Submit: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 47
Claiming Existing Mainframe IDs Once you click Submit, the item will be removed from your claim list. CRS will create a new user profile and add the login ID to it. The user will be emailed a notification that his/her request has been approved. See Claim Request Approved Email for further details. 5 If you want to reject a claim request, check the Reject box, enter a reject reason, and click Submit: Once you click Submit, the item will be removed from your claim list but a user profile will not be generated for the ID. Another user can now claim the ID. The user will be emailed a notification that his/her request has been rejected. See Claim Request Rejected Email for further details. Note that the reason for rejecting the request is included in the email, so use appropriate language. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 48
Searching For Transactions Searching For Transactions A transaction is something CRS does: creating a new user, modifying an existing user, deleting an existing user, etc. The Transaction History function allows you to search for and display the details of a specific transaction. 1 Choose Transaction History from the Auditing and Reporting menu: 2 You will be prompted to enter search criteria: Note: The User ID is the same as the login ID. Note: Company ID defaults to your company s ID and cannot be changed. Note: The Request Type field allows you to limit your search to a specific type of request. See Request Type for further details. Note: The Request Status field allows you to limit your search to a specific status of request. See Request Status for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 49
Searching For Transactions Request Types 3 Enter your search criteria and click Search. A list of transactions matching your criteria will be displayed: Note: A transaction may be broken down into multiple requests, one per productenvironment. Each transaction-request is processed separately by CRS. If there is a problem with one transaction-request, the others can complete successfully. 4 Click on a transaction-request to display the details of that transaction-request: 5 Click Back. Request Types The following table describes the request types that are currently supported by CRS: Table 2: Request Types Request Type AC Agreement ACK AC Agreement NAK Requests to accept AC agreements. See Logging Into CRS for further details. Requests to reject AC agreements. See Logging Into CRS for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 50
Searching For Transactions Request Status Request Type Certificate Issuance Claim Login ID Computer Reg Code- Migration Computer Reg Code-Issue Computer Reg Code- Registration Delegated New Delegated Profile Update Delegated Update Delete User Disable User Enable User Hint Questions Update Password Reset Profile Update Reverification Updates Requests to reissue digital certificates to login IDs. See Reissuing Digital Certificates for further details. Note: this does not include login IDs that have received digital certificate as a result of new registrations. Requests to claim existing mainframe login IDs. See Claiming Existing Mainframe IDs for further details. A user has been automatically issued an activation code. No AC/Super AC intervention is required. See Registering Computers for further details. An AC/Super AC has issued a user a new activation code. See Registering Computers for further details. A user whose computer registration has expired, been lost, or been corrupted has been automatically issued a new activation code. No AC/Super AC intervention is required. See Registering Computers for further details. AC-entered requests to create new user profiles. See Creating User Profiles for further details. AC-entered requests to update user profiles. See Updating User Profiles for further details. AC-entered requests to add/modify products for user profiles. See Adding/Modifying Products for further details. Requests to delete login IDs. See Deleting Login IDs for further details. Requests to disable login IDs. See Disabling Login IDs for further details. Requests to enable login IDs. See Enabling Login IDs for further details. Requests to update login IDs hint questions. Requests to reset login IDs passwords. See Resetting Passwords for further details. User-entered requests to update profiles. Requests to reverify users. See Reverifying Users for further details. Request Status The following table describes the request statuses currently supported by CRS. Note that some request statuses are used for many different request types. For example, the request status Completed (COM) is used by many different request types. Other request statuses are used for a specific request type. For example, the Pending Additional Information request status is specific to the Self Reg New request type. Keep this in mind when searching by request status: Table 3: Request Statuses Request Status Accepted (ACC) Completed (COM) Completion in Progress (CIP) Cookie Download The request is awaiting approval by another AC or Super AC. The request has completed successfully. The request is in the process of being completed. This is an interim state that occurs between PUC and COM. If it last for more than a few seconds, this may indicate the user quit in the middle of completing the request. Indicates the digital cookie has been successfully downloaded to the person s PC. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 51
Searching For Transactions Request Status Request Status Cookie Reject Incomplete Request (INC) New Request (NEW) Pending Additional Information (PEN) Pending User Completion (PUC) Processing Failure From ACC Processing Failure From PUC PROF Processing (PRF) Rejected (REJ) Sync Processing ACC Sync Processing CIP A system message indicating a previous cookie request has been cancelled. This usually occurs when a person has taken too long to respond to an outstanding cookie request. The request has been rejected by another AC or Super AC. See Managing Your Worklist for further details. A new delegated request has been entered by an AC or Super AC, or a new self-registration request has been received. The request is being held until additional information can be entered. See Managing Your Worklist for further details. The request is waiting for the user to complete registration. See Completing Registration for further details. An error has occurred after approving a request. Try resubmitting the request. See Resubmitting And Rejecting Transactions for further details. An error has occurred after the request has been sent to the user to complete. Try resubmitting the request. See Resubmitting And Rejecting Transactions for further details. The PROF database has been successfully updated. This status applies only to mainframe login IDs. If it last for more than a few seconds, contact Customer Support. The request has been rejected. See Rejecting Transactions for further details. CRS is updating its databases after a request has been approved. This is an interim state. If it lasts for more than a few seconds, contact Customer Support. CRS is updating its databases after a user has completed a request. This is an interim state. If it lasts for more than a few seconds, contact Customer Support. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 52
Resubmitting And Rejecting Transactions Resubmitting Transactions Resubmitting And Rejecting Transactions A transaction may not complete processing for some reason. If this happens, you have two options: resubmit the transaction or reject the transaction. These options are described below. Resubmitting Transactions CRS may encounter a temporary problem processing a transaction. The following statuses indicate temporary problems: Processing Failure from ACC Processing Failure from PUC Sync Processing - ACC Sync Processing - PUC If a transaction is in one of the preceding states, then you can resubmit it for processing. To resubmit a transaction: 1 Display the transaction. See Searching For Transactions for further details. 2 Click Resubmit. You will be prompted to enter a reason for resubmitting the transaction. 3 Enter a reason and click Add. The transaction will be resubmitted for processing. If the transaction is successful this time, then its status will change either to Pending User Completion (PUC) or Completed (COM), depending on its previous status. If the problem persists, contact Customer Support. Rejecting Transactions A user may never login to complete a transaction for some reason. See Completing Registration for further details. If a user never logs in to complete a transaction, then the transaction will remain in the Pending User Completion (PUC) state indefinitely. To cleanup transactions that have been in the PUC state too long, you can reject them. Rejecting a transaction changes its status from PUC to Rejected (REJ), i.e., flags that you are no longer waiting for the user to complete the request. Note: Once a transaction has been rejected, the user can no longer complete the request. Before rejecting a transaction, try to contact the user and find out why he/she hasn t completed the request yet. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 53
Resubmitting And Rejecting Transactions Rejecting Transactions To reject a transaction: 1 Display the transaction. See Searching For Transactions for further details. 2 Click Reject. You will be prompted to enter a reason for rejecting the transaction. 3 Enter a reason and click Add. The transaction s status will change to REJ (rejected). CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 54
Generating Email Domain Reports Generating Email Domain Reports This function allows you to display a list of changes to your company s list of email domains for a specific date range. 1 Choose Email Domain Reports from the Admin Services menu: 2 You will be prompted to enter a date range: Note: Company ID defaults to your company s ID and cannot be changed. Note: If you don t enter a date range, it defaults to all changes to your company s list of email domains. 3 Enter a date range and click Search Submit. CRS will display a list of email domain changes that match your criteria: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 55
Managing Email Domains Managing Email Domains An email domain is the characters to the right of the at sign ( @ ) in an email address. For example, for the email address jdoe@xxx.com, the email domain is xxx.com. Each company in CRS has associated with it a list of one or more email domains. When you add a new user to CRS, CRS checks that the user s email domain matches one of your company s email domains. If they don t match, you are warned and may, optionally, add the user s email domain to your company s domains. See Creating User Profiles for further details. You can generate a report of changes to your company s list of email domains for a specific date range. See Generating Email Domain Reports for further details. 1 Choose Email Domain Management from the Admin Services menu: 2 CRS will display a list of your company s email domains: Only active email domains are checked. 3 If you want to activate/deactivate an existing email domain, set the Active menu to Y or N and click the Update button next to it. 4 If you want to add a new email domain to your company s list of email domains, fill in the Domain field and click Add. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 56
Reverifying Users Reverifying Users The purpose of reverification is to periodically check users only have access to the products, roles, and accounts they should have access to. You should reverify all of your users at least once a year. User permissions require reverification periodically and appear on both the Super AC s and AC s Reverify Users screen when reverification is due. You can reverify users individually or multiple users simultaneously. Once a user s ID is reverified, it is removed from the Reverify Users screen. Reverification is segregated by product. For example, if a user has ACATS, then you must have ACATS to reverify that user for that product. You can configure the reverification period for each of your products. See Managing Reverification for further details. CRS automatically sends you an email when it is time for reverification. See Reverification Reminder Email for further details. Note: ACs cannot reverify themselves, other ACs, or Super ACs. 1 Choose Reverify Users from the Admin Services menu: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 57
Reverifying Users 2 A list of users requiring reverification will be displayed: Note: If no users currently require verification, then the no users to be reverified were found at this time message will be displayed. 3 Click the checkboxes next to the users you want to reverify. 4 Click the Reverify Selected button. The users IDs you selected are reverified and no longer appear on the AC Reverification page. Note: If you don t want to reverify a login ID, then you have two options: You can modify that login ID, deleting the products you don t want it to have access to. See Adding/Modifying Products for further details. You can delete that login ID entirely. See Disabling Login IDs for further details. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 58
Managing Reverification Managing Reverification User access to products must be periodically reverified. See Reverifying Users for further details. This function allows you to set the reverification period for each of your products. Products may be reverified: Annually Semi-annually Quarterly Monthly Not at all. Note: We recommend that you reverify all your products at least annually; however, you are not forced to. If you set your reverification period to Not at all, then once a year you will be sent a reminder to review your reverification period. See Reverification Period Email for further details. 1 Choose Reverification Management from the Admin Services menu: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 59
Managing Reverification 2 A list of products and their reverification periods will be displayed: 3 If you want to change a product s reverification period, click on the Reverification Period dropdown menu, select the appropriate period, and click Update: CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 60
Appendix: Emails Appendix: Emails CRS automatically sends emails to users under the following conditions: The user has a request pending completion. A registration request has been completed for an existing user. It s time to reverify your users. You haven t set a reverification period for your users. You have reset the user s password. The user has been issued an activation code. The user s digital certificate is about to expire. You have issued the user a new digital certificate. The user has updated his/her hint questions. The user has updated his/her profile information. You have approved a request to claim a mainframe ID. You have rejected a request to claim a mainframe ID. These emails are described in the following sections. New Web Login ID Emails When you create a new web login ID, CRS sends two emails to the user: one containing the login ID, and one containing a temporary password. From: To: Subject: WebRSG@dtcc.com <user> DTCC Registration Request APPROVED-Login ID Your request for access to the DTCC Web product for login ID <login id> has been approved. For security reasons, you will receive your temporary password in a separate email shortly. If you have questions about your registration request, encounter a problem, or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 61
Appendix: Emails New Web Login ID Emails From: To: Subject: WebRSG@dtcc.com <user> DTCC Registration Request APPROVED-Temporary Password Your request for access to the DTCC Web product has been approved. You were previously emailed your login ID for this product. Your temporary password for this login ID is <password>. Please take the following steps to complete your registration: 1. Go to the portal link provided at the end of this email. 2. Login with your login ID and temporary password. 3. If a digital certificate is required for your product, please follow the displayed prompts. 4. Follow all on screen instructions. Go to your product. The URL for the DTCC Portal on the internet is: https://portal6.dtcc.com For DTCC Employees, you will need to use: https://portal6.dtcc.org If you have questions about your registration request, encounter a problem, or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the DTCC Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 62
Appendix: Emails New Global Login ID Emails New Global Login ID Emails When you create a new global login ID, CRS sends two emails to the user: one containing the login ID, and one containing a temporary password. From: To: Subject: WebRSG@dtcc.com <user> DTCC Registration Request APPROVED-Login ID Your request for access to the DTCC Global product for login ID <login id> has been approved. For security reasons, you will receive your temporary password in a separate email shortly. If you have questions about your registration request, encounter a problem, or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) From: To: Subject: WebRSG@dtcc.com <user> DTCC Registration Request APPROVED-Temporary Password Your request for access to the DTCC Global product has been approved. You were previously emailed your login ID for this product. Your temporary password for this login ID is <password>. Please take the following steps to complete your registration: 1. Go to the portal link provided at the end of this email. 2. Login with your login ID and temporary password. 3. If a digital certificate is required for your product, please follow the displayed prompts. 4. Follow all on screen instructions. Go to your product. The URL for the DTCC Global Portal on the internet is: https://gtr.asia.dtcc.com If you have questions about your registration request, encounter a problem, or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the DTCC Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 63
Appendix: Emails Claim Existing Mainframe Login ID Email Claim Existing Mainframe Login ID Email If you claim an existing mainframe login ID, CRS sends the following email to the user: From: WebRSG@dtcc.com Sent: <date/time> To: <user> Subject: AC Claimed Mainframe Login ID For You Your Access Coordinator claimed mainframe login ID <login ID> for you in PROD system. Please take a few moments and complete the process as follows: 1. Access PBS as you do today. If you do not have access to PBS, please contact your Network Administrator or your Access Coordinator on how to access DTCC mainframe applications at your company. 2. Login using <login id> and your password. 3. Click the 'Complete Your Registration' link on the Mainframe Portal. 4. Select and answer your hint questions. These will be necessary if you must ever have Customer Support reset your password. 5. Logoff. If you have questions about your registration request, encounter a problem or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the DTCC Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 64
Appendix: Emails Existing User Registration Completion Emails Existing User Registration Completion Emails These emails are sent when an existing login ID is registered for a new product. There are different emails depending on the login ID type: web, global, or mainframe. Web Products Email From: WebRSG@dtcc.com To: <user> Subject: DTCC Login ID Update: COMPLETED <product> has been updated for login ID <login ID>. There is no action required on your part. The URL for the DTCC Portal on the internet is: https://portal.dtcc.com For DTCC Employees, you will need to use: https://portal.dtcc.org If you have questions about your registration request, encounter a problem, or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) Global Products Email From: WebRSG@dtcc.com To: <user> Subject: DTCC Login ID Update: COMPLETED <product> has been updated for login ID <login ID>. There is no action required on your part. The URL for the DTCC Global Portal on the internet is: https://gtr.asia.dtcc.com If you have questions about your registration request, encounter a problem, or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 65
Appendix: Emails Existing User Registration Completion Emails Mainframe Products Email From: WebRSG@dtcc.com To: <user> Subject: DTCC Login ID Update: COMPLETED <product> has been updated for login ID <login ID>. There is no action required on your part. Continue to login to PBS as you do today or contact your Network Administrator or your Access Coordinator on how to access DTCC mainframe applications at your company. If you have questions about your registration request, encounter a problem or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 66
Appendix: Emails Reverification Email Reverification Email Reverification Reminder Email CRS sends the following email to you when it is time for reverification. See Reverifying Users for further details: From: To: Subject: WebRSG@dtcc.com <user> Reverification Reminder Dear <first name> <last name>, As a designated Super Access Coordinator or Access Coordinator, the user reverification period set by you has expired. Please log onto the Customer Registration System (CRS) and verify that the users shown are valid and that their access is appropriate as listed. Please refer to the section of the Access Coordinator User Guide titled "Reverifying Users" for further details. If you have any questions, please contact Customer Support at: U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 67
Appendix: Emails Reverification Email Reverification Period Email CRS send this email once a year if you haven t set a reverification period. See Managing Reverification for further details: From: WebRSG@dtcc.com To: <user> Subject: Reverification Period Dear <first name> <last name>, As a designated Super Access Coordinator or Access Coordinator, you have not selected a reverification period for users of DTCC's products. While the reverification process is optional, DTCC recommends that you reverify all of your users at least annually. The reverification process allows Super Access Coordinators and Access Coordinators the ability to confirm that users at their company are valid and that they have appropriate access to products. Please log onto the Customer Registration System (CRS) to confirm your election to opt out of the reverification process, or you may choose to select a reverification period. Please refer to the section of the Access Coordinator User Guide titled "Managing Reverification" for further details If you have any questions, please contact Customer Support at: U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 68
Appendix: Emails Reset Password Email Reset Password Email CRS sends the user this email after you reset his/her password. See Resetting Passwords for further details. Two emails are sent: one containing the login ID, the other containing the temporary password. The same emails are sent regardless of login ID type. From: To: Subject: WebRSG@dtcc.com <user> DTCC Password Reset-Login ID Your password has been reset for login ID <login ID>. For security reasons, you will be receiving your temporary password in a separate email shortly. If you have questions about this email, encounter a problem, or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) From: To: Subject: WebRSG@dtcc.com <user> DTCC Password Reset-Temporary Password Your password has been reset. You were previously emailed your login ID. Your temporary password is <password>. Please login immediately and change your temporary password. If you have questions about this email, encounter a problem, or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 69
Appendix: Emails Reissued Activation Code Email Reissued Activation Code Email CRS sends this email to a user after you issue him/her another activation code. See Registering Computers for further details. Note: The same email is sent when a user is automatically issued an activation code. Web Login IDs From: WebRSG@dtcc.com To: <user> Subject: DTCC Computer Registration Required Dear User: You recently attempted to access the DTCC or MarkitSERV portal, but we didn't recognize the computer you're using. In order to ensure only authorized users access your information, we need to verify your identity before you log in. There are a number of reasons we may not recognize your computer: - You are using a new computer. - Your computer settings have changed. - The cookies on your computer have been deleted. - The configuration of your computer's operating system or software has changed. - Your internet service provider may have changed some settings. Please close ALL of your Internet Explorer Browser Windows that may be open before proceeding. For DTCC Portal users go to page https://portal.dtcc.com, click on the 'Identify Your Computer' link, and follow the instructions. You will need the following activation code: <activation code> For MarkitSERV Portal users, go to https://portal.markitserv.com/crs1/regcnfrm/cookieactivationentry.do. Enter the activation code: <activation code> Your activation code will expire: <expiration date/time>. Please use it immediately to identify your computer. If you have received more than one email, be sure to use the activation code in the latest email. If you have questions about your access request, encounter a problem or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, please contact our Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 70
Appendix: Emails Reissued Activation Code Email Global Login IDs From: WebRSG@dtcc.com To: <user> Subject: DTCC Computer Registration Required Dear User: You recently attempted to access the DTCC Global portal, but we didn't recognize the computer you're using. In order to ensure only authorized users access your information, we need to verify your identity before you log in. There are a number of reasons we may not recognize your computer: - You are using a new computer. - Your computer settings have changed. - The cookies on your computer have been deleted. - The configuration of your computer's operating system or software has changed. - Your internet service provider may have changed some settings. Please close ALL of your Internet Explorer Browser Windows that may be open before proceeding. For DTCC Global Portal users go to page https://gtr.asia.dtcc.com, click on the 'Identify Your Computer' link, and follow the instructions. You will need the following activation code: <activation code> Your activation code will expire: <expiration date/time>. Please use it immediately to identify your computer. If you have received more than one email, be sure to use the activation code in the latest email. If you have questions about your access request, encounter a problem or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, please contact our Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) Mainframe Login IDs Not applicable. Mainframe login IDs don t use activation codes. CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 71
Appendix: Emails Digital Certificate Email Digital Certificate Email Currently, only web login IDs with B2B products use digital certificates. See Reissuing Digital Certificates for further details. Digital Certificate About To Expire Email CRS sends this email to a user thirty days before his/her digital certificate is due to expire. CRS continues to send this email weekly until the user renews his/her digital certificate or the certificate expires. From: To: Subject: WebRSG@dtcc.com <user> DTCC Digital Certificate Expiration Alert Warning: Your digital certificate expires on <expiration date>. You have 7 days before your digital certificate expires. If you fail to renew your certificate before <expiration date>, then you may be unable to access one or more of your products. Please visit the DTCC Portal to renew your certificate. The URL for the DTCC Portal on the internet is: https://portal6.dtcc.com If you should experience a problem with this process, please contact DTCC Customer Support at: U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 72
Appendix: Emails Digital Certificate Email Reissued Digital Certificate Email CRS sends this email to a user after you issue him/her another digital certificate. See Reissuing Digital Certificates for further details. From: To: Subject: WebRSG@dtcc.com <user> DTCC Digital Certificate Reissuance-Login ID Your digital certificate for login ID <login ID> is now available for download. You will be receiving your certificate retrieval code in a separate email shortly. If you have questions about your registration request, encounter a problem or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) From: To: Subject: WebRSG@dtcc.com <user> DTCC Digital Certificate Reissuance-Certificate Retrieval Code Your digital certificate is now available for download. You were previously emailed your login ID. Your certificate retrieval code is <retrieval code>. Please login to https://portal.dtcc.com and choose the Registration Confirmation link under 'My Access'. If you have questions about your registration request, encounter a problem or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 73
Appendix: Emails User Update Emails User Update Emails Users can update their hint questions and profiles without AC intervention by clicking links on the Portal. When this happens, CRS sends them notification emails. Updated Hint Questions Email CRS sends this email when a user updates his/her hint questions: From: To: Subject: WebRSG@dtcc.com <user> DTCC Hint Questions Updated Dear User: This email is to confirm you have recently viewed or updated your DTCC hint questions and answers. If you have questions about this email, or these updates have been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) Updated User Profile Email CRS sends this email when a user updates his/her profile. No email is sent when an AC updates a user s profile: From: To: Subject: WebRSG@dtcc.com <user> DTCC Registration Request: User Profile Updated Dear User: This email is to confirm that your DTCC profile has been recently updated. If you have questions about your registration request, encounter a problem or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 74
Appendix: Emails Claiming Existing Mainframe IDs Email Claiming Existing Mainframe IDs Email CRS sends these emails when you approve or reject a request to claim a mainframe ID. There are different emails depending on whether you approve or reject the request. See Claiming Existing Mainframe IDs for further details. Claim Request Approved Email This email is sent when you approve a claim mainframe ID request. From: To: Subject: WebRSG@dtcc.com <user> User Profile Approved Congratulations! Your profile request for ID <mainframe ID> has been approved by your Access Coordinator. Please take a few moments and complete the process as follows: 1) Access PBS as you do today. If you do not have access to PBS, please contact your Network Administrator or your Access Coordinator on how to access DTCC mainframe applications at your company. 2) Login using <mainframe ID> and your password. 3) Click the Complete Your Registration link on the Mainframe Portal. 4) Select and answer your hint questions. These will be necessary if you must ever have Customer Support reset your password. 5) Logoff. If you have questions about your user profile, encounter a problem or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) Claim Request Rejected Email This email is sent when you reject a claim mainframe ID request: From: To: Subject: WebRSG@dtcc.com <user> User Profile Rejected Your profile request for ID <mainframe ID> has been rejected by your Access Coordinator for the following reason: <reason>. If you have questions about your user profile, encounter a problem, or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 75
Appendix: Emails Worklist Emails Worklist Emails This email is generated when you pend a request on your worklist. See Managing Your Worklist for further details. Pending Email From: WebRSG@dtcc.com To: <user> Subject: PENDING Your request for access to DTCC's <product> is currently pending approval. <reason> If you have questions about your registration request, encounter a problem or this update has been made without your knowledge, please contact your Access Coordinator (AC). If your AC is unavailable, or you do not have one, then contact the Customer Support Center. U.S. and Canada Callers: 888-382-2721 (Select option 5 then 2) International Callers: 212-855-8099 (Select option 5 then 2) CRS Access Coordinator User Guide DTCC Controlled Non Confidential (Green) Page 76